CVE-2025-65713: Home-Assistant

Medium severity, CVSS 4.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Home Assistant Core before v2025.8.0 is vulnerable to Directory Traversal. The Downloader integration does not fully validate file paths during concatenation, leaving a path traversal vulnerability.

Affected products

• Home-Assistant Home-Assistant: before 2025.8.0 (fixed in 2025.8.0)

Published 2025-12-23. Last modified 2026-06-17.